Privacy Policy

1. Who We Are

Padi Finance is a financial education provider registered and operating in Singapore. Our registered address is 51 Bras Basah Road, #15-02, Singapore 189554. We offer structured courses in personal finance, investment literacy, and retirement preparation for adults aged 40 and above.

For enquiries relating to this Privacy Policy, please contact us at [email protected] or by telephone at +65 9163 8472.

2. Personal Data We Collect

We collect personal data only when it is necessary for us to provide our services or communicate with you effectively. The categories of data we may collect include:

• Your name and contact details, including email address and telephone number
• Your enquiry or message content when you contact us through our website or by phone
• Enrolment information, including which programme you are joining and your preferred cohort dates
• Payment records required for billing and receipting purposes
• Attendance and participation records, retained as part of our programme administration
• Feedback submitted voluntarily following course completion

We do not collect sensitive personal data such as NRIC numbers, financial account credentials, or health-related information unless a specific and disclosed purpose requires it.

3. How We Use Your Personal Data

Your personal data is used for the following purposes:

• To respond to your enquiries and provide information about our programmes
• To process enrolment and manage your participation in a course
• To communicate programme logistics, including schedules, venue details, and materials
• To issue receipts and maintain financial records as required by law
• To send programme updates or future cohort announcements, where you have not objected
• To improve our programmes based on aggregated, de-identified feedback
• To comply with applicable Singapore laws and regulations

We do not use your personal data for automated decision-making, profiling, or any purpose unrelated to our educational services.

4. Legal Basis and Consent

Under Singapore's Personal Data Protection Act 2012 (PDPA), we are required to have a valid basis for collecting and using personal data. Our bases are as follows:

• Contractual necessity — when processing is required to fulfil your enrolment or respond to a service request
• Legitimate interests — for programme administration, internal records, and communications directly relevant to our services
• Consent — where we send optional communications such as future cohort announcements or educational materials, we rely on your consent, which you may withdraw at any time
• Legal obligation — where we are required to retain or disclose data to comply with Singapore law

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data in the following limited circumstances:

• Service providers — third-party vendors who assist with website hosting, payment processing, or email delivery, bound by data processing agreements
• Legal requirements — where disclosure is required by law, court order, or regulatory instruction in Singapore
• Business continuity — in the event of a business transfer or restructuring, to the extent permitted by the PDPA

Any third party receiving personal data on our behalf is required to handle it in accordance with this policy and applicable Singapore law.

6. Data Retention

We retain personal data only for as long as it is needed to fulfil the purposes described in this policy, or as required by applicable law:

• Enrolment and attendance records are retained for a minimum of five years following the last course completed, for administrative and regulatory purposes
• Financial and billing records are retained in accordance with Singapore's accounting and tax requirements
• Enquiry and contact records are retained for twelve months unless they relate to an enrolment
• Marketing communication preferences are retained until you withdraw consent

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights Under the PDPA

As an individual in Singapore, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for the use of your data for optional communications at any time
• Request the deletion of your data, subject to legal retention obligations
• Lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframes prescribed by the PDPA, typically within 30 days.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, disclosure, or loss. Our website uses HTTPS encryption for data in transit. Access to personal data is limited to staff who require it for their role.

Despite these measures, no data transmission over the internet can be guaranteed to be entirely secure. If you have concerns about the security of data you have sent us, please contact us directly.

9. Cookies

Our website uses cookies to support its operation and, with your consent, to help us understand how visitors use the site. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website or services following any update constitutes your acknowledgement of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please reach us through any of the following:

You may also contact the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg if you wish to make a complaint about how we handle your personal data.